The process ctfmon.exe:1240 makes changes in the system registry.The Backdoor deletes the following value(s) in system registry:The Backdoor disables automatic startup of the application by deleting the following autorun value: